[Mar 08, 2023] Valid CCSP Test Answers & CCSP Exam PDF [Q446-Q464]

ExamBoosts March 8, 2023 CCSP > ISC 0

Rate this post

[Mar 08, 2023] Valid CCSP Test Answers & CCSP Exam PDF

Valid ISC Cloud Security CCSP Dumps Ensure Your Passing

NEW QUESTION 446
Cloud vendors are held to contractual obligations with specified metrics by:
Response:

SLAs

Regulations

Law

Discipline

NEW QUESTION 447
Aside from the fact that the cloud customer probably cannot locate/reach the physical storage assets of the cloud provider, and that wiping an entire storage space would impact other customers, why would degaussing probably not be an effective means of secure sanitization in the cloud?

All the data storage space in the cloud is already gaussed.

Cloud data storage may not be affected by degaussing.

Federal law prohibits it in the United States.

The blast radius is too wide.

NEW QUESTION 448
What is a cloud storage architecture that manages the data in caches of copied content close to locations of high demand?
Response:

Object-based storage

File-based storage

Database

CDN

NEW QUESTION 449
Which phase of the cloud data lifecycle represents the first instance where security controls can be implemented?

Use

Store

Create

The store phase occurs immediately after the create phase, and as data is committed to storage structures, the first opportunity for security controls to be implemented is realized. During the create phase, the data is not yet part of a system where security controls can be applied, and although the use and share phases also entail the application of security controls, they are not the first phase where the process occurs.

NEW QUESTION 450
Which standards body depends heavily on contributions and input from its open membership base?

NIST

ISO

ICANN

CSA

NEW QUESTION 451
Which of the following is NOT considered a type of data loss?

Data corruption

Stolen by hackers

Accidental deletion

Lost or destroyed encryption keys

Explanation/Reference:
Explanation:
The exposure of data by hackers is considered a data breach. Data loss focuses on the data availability rather than security. Data loss occurs when data becomes lost, unavailable, or destroyed, when it should not have been.

NEW QUESTION 452
The Cloud Security Alliance (CSA) publishes the Notorious Nine, a list of common threats to organizations participating in cloud computing.
According to the CSA, what is one reason the threat of insecure interfaces and APIs is so prevalent in cloud computing?
Response:

Most of the cloud customer’s interaction with resources will be performed through APIs.

APIs are inherently insecure.

Attackers have already published vulnerabilities for all known APIs.

APIs are known carcinogens.

NEW QUESTION 453
What is the cloud service model in which the customer is responsible for administration of the OS?
Response:

IaaS

PaaS

SaaS

QaaS

NEW QUESTION 454
Which of the following frameworks focuses specifically on design implementation and management?

ISO 31000:2009

ISO 27017

NIST 800-92

HIPAA

Explanation
ISO 31000:2009 specifically focuses on design implementation and management. HIPAA refers to health care regulations, NIST 800-92 is about log management, and ISO 27017 is about cloud specific security controls.

NEW QUESTION 455
Which type of cloud model typically presents the most challenges to a cloud customer during the “destroy” phase of the cloud data lifecycle?

IaaS

DaaS

SaaS

PaaS

Explanation/Reference:
Explanation:
With many SaaS implementations, data is not isolated to a particular customer but rather is part of the overall application. When it comes to data destruction, a particular challenge is ensuring that all of a customer’s data is completely destroyed while not impacting the data of other customers.

NEW QUESTION 456
Which of the following contract terms most incentivizes the cloud provider to meet the requirements listed in the SLA?
Response:

Regulatory oversight

Financial penalties

Performance details

Desire to maintain customer satisfaction

NEW QUESTION 457
A truly airgapped machine selector will ____________.
Response:

Terminate a connection before creating a new connection

Be made of composites and not metal

Have total Faraday properties

Not be portable

NEW QUESTION 458
DLP can be combined with what other security technology to enhance data controls?
Response:

DRM

SIEM

Kerberos

Hypervisors

NEW QUESTION 459
The Open Web Application Security Project (OWASP) Top Ten is a list of web application security threats that is composed by a member-driven OWASP committee of application development experts and published approximately every 24 months. The 2013 OWASP Top Ten list includes “using components with known vulnerabilities.” Why would an organization ever use components with known vulnerabilities to create software?

The organization is insured.

The particular vulnerabilities only exist in a context not being used by developers.

Some vulnerabilities only exist in foreign countries.

A component might have a hidden vulnerability.

NEW QUESTION 460
Data labels could include all the following, except:

Distribution limitations

Multifactor authentication

Confidentiality level

Access restrictions

All the others might be included in data labels, but multifactor authentication is a procedure used for access control, not a label.

NEW QUESTION 461
Which of the following are not examples of personnel controls?

Background checks

Reference checks

Strict access control mechanisms

Continuous security training

NEW QUESTION 462
Which aspect of cloud computing makes it very difficult to perform repeat audits over time to track changes and compliance?

Virtualization

Multitenancy

Resource pooling

Dynamic optimization

Cloud environments will regularly change virtual machines as patching and versions are changed.
Unlike a physical environment, there is little continuity from one period of time to another. It is very unlikely that the same virtual machines would be in use during a repeat audit.

NEW QUESTION 463
DNSSEC was designed to add a layer of security to the DNS protocol.
Which type of attack was the DNSSEC extension designed to mitigate?

Account hijacking

Snooping

Spoofing

Data exposure

Explanation
DNSSEC is an extension to the regular DNS protocol that utilizes digital signing of DNS query results, which can be verified to come from an authoritative source. This verification mitigates the ability for a rogue DNS server to be used to spoof query results and to direct users to malicious sites. DNSSEC provides for the verification of the integrity of DNS queries. It does not provide any protection from snooping or data exposure. Although it may help lessen account hijacking by preventing users from being directed to rogue sites, it cannot by itself eliminate the possibility.

NEW QUESTION 464
What does a cloud customer purchase or obtain from a cloud provider?

Services

Hosting

Servers

Customers

No matter what form they come in, “services” are obtained or purchased by a cloud customer from a cloud service provider. Services can come in many forms–virtual machines, network configurations, hosting setups, and software access, just to name a few. Hosting and servers–or, with a cloud, more appropriately virtual machines–are just two examples of “services” that a customer would purchase from a cloud provider. “Customers” would never be a service that’s purchased.

Loading …